Cybersecurity is evolving into a distinct practice around cybersecurity, whether that function is performed by internal staff, external partners, or a combination of both. The number of companies that report complete satisfaction with their security posture is rising (45% in 2019 compared to 21% in 2017) Only 44% of companies feel that their business staff have an ideal level of security expertise at 77% of the firms with skill gaps. Small companies are the most likely to report heavy use of metrics for security, probably due to the fact that these firms use a third party that provides metrics around their services.”]
Source: https://connect.comptia.org/content/research/cybersecurity-for-digital-operations